Extracted

• • Target
    2026-08-13_c9ccb785c177be66a5bc1cfc69dd4640_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
  • Size 5.3MB
  • SHA256 a2f129c465c5321736f7909125afa9ce53948ff40be0cabf315af77ca5ac5134
  • MD5 c9ccb785c177be66a5bc1cfc69dd4640
  • SHA1 d95320748e11e4dd5a9985df2b95f88ceef05d43
  • SHA512 4601df14227195291c299cf91d9358457618afe89da707311d6aacec9f77979653f2a00fbb40e3bd81b39257858648fff150ffbd8bf6d9f3a513c931c0da8c3c
  • SSDEEP 49152:4p5s+SpY6kTqMO0EPEAYPToNxJtN4q5AIkBeJKcK9KhPGEa5ErV2aLrmoU:40wUP9YLolPX3k/EZ2oq
  • TLSH
    T1A7466B53ECA104EAC1DAA231C9A79252BB757C484B7223D32FA0B7782F727D06D79714
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2